General

  • Target

    e6184df9f266594b8381ccd80596d9ea03b99b7b5c17a93e722a9a250214e35c

  • Size

    1.6MB

  • Sample

    241109-ff9vzsxhqd

  • MD5

    4aaa3310fa8dd06fb2b7a688ec3e228e

  • SHA1

    dd544c26d822182d60ea2b176f86c4fd76bf69c8

  • SHA256

    e6184df9f266594b8381ccd80596d9ea03b99b7b5c17a93e722a9a250214e35c

  • SHA512

    cfe2dc4c2151382fa601c98e5ea79120bb24bd2465cd7a8cf7106041b93ba5ea459fc0ddd39d7971a11dda31751e74cb1ff3deae0cd5b6d8d30b0ef9066ffec1

  • SSDEEP

    24576:MkwtMBaaZfvYlssbDqAuBp23ezaEiErSn/p/9ngCikeXF44dp2GRxQPsv:Mkf9ZTWuzaEiEIx5wHC0zVv

Malware Config

Targets

    • Target

      e6184df9f266594b8381ccd80596d9ea03b99b7b5c17a93e722a9a250214e35c

    • Size

      1.6MB

    • MD5

      4aaa3310fa8dd06fb2b7a688ec3e228e

    • SHA1

      dd544c26d822182d60ea2b176f86c4fd76bf69c8

    • SHA256

      e6184df9f266594b8381ccd80596d9ea03b99b7b5c17a93e722a9a250214e35c

    • SHA512

      cfe2dc4c2151382fa601c98e5ea79120bb24bd2465cd7a8cf7106041b93ba5ea459fc0ddd39d7971a11dda31751e74cb1ff3deae0cd5b6d8d30b0ef9066ffec1

    • SSDEEP

      24576:MkwtMBaaZfvYlssbDqAuBp23ezaEiErSn/p/9ngCikeXF44dp2GRxQPsv:Mkf9ZTWuzaEiEIx5wHC0zVv

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks